Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tIKypw8G7_jizRkH1bGiKjS0dBM.roa
File: tIKypw8G7_jizRkH1bGiKjS0dBM.roa (raw, json)
Hash identifier: bp+yoE8Ho1yNa2/DcwbU/ULO8qOFOgbYf3sstXui6/g=
Subject key identifier: B4:82:B2:A7:0F:06:EF:F8:E2:CD:19:07:D5:B1:A2:2A:34:B4:74:13
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79524A76E596FB0F7E55102FE945775
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tIKypw8G7_jizRkH1bGiKjS0dBM.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42007
IP address blocks: 193.233.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:24:a7:6e:59:6f:b0:f7:e5:51:02:fe:94:57:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b482b2a70f06eff8e2cd1907d5b1a22a34b47413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cf:49:e6:fc:c7:a9:cd:80:79:9a:64:aa:24:
67:d1:0e:ab:2f:d0:d9:6f:d4:2c:de:f8:e2:e8:aa:
86:5b:66:bf:38:41:b4:81:f6:e8:ca:ed:38:18:99:
d7:7b:14:39:af:15:0c:44:f4:e5:5c:05:d0:49:da:
e3:16:0c:96:1f:14:fd:53:c5:29:1b:da:75:00:4d:
b9:f0:24:9f:2a:6f:18:49:47:91:0b:cb:ad:30:d9:
a8:17:31:3f:bb:c0:46:45:6d:c7:69:38:19:6f:51:
5f:5d:c1:b9:5d:cf:f7:1c:61:10:ed:f9:a2:f8:4a:
02:10:c8:ae:65:10:c9:31:10:57:d5:7f:7d:2f:33:
16:ce:71:14:c1:73:9b:39:6e:09:31:cf:bf:0a:31:
25:bb:11:65:9a:d4:8c:39:c4:71:ca:3e:2d:3b:a4:
7c:bf:7e:b8:b1:74:54:69:76:e7:7b:d3:5a:17:39:
8d:20:a4:c0:c6:f9:cb:4e:8b:3b:68:9b:b9:d8:19:
b4:6d:e1:57:94:d6:c0:b9:80:d7:7c:74:bf:de:55:
58:9f:d6:c7:3f:24:3d:c1:7e:de:d8:09:9d:3e:80:
eb:39:38:6d:ef:a6:0b:13:1a:70:41:2a:6c:da:de:
ce:68:ca:f1:c3:1a:f3:d2:f3:de:13:87:ac:b2:20:
cd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:82:B2:A7:0F:06:EF:F8:E2:CD:19:07:D5:B1:A2:2A:34:B4:74:13
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/tIKypw8G7_jizRkH1bGiKjS0dBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.32.0/20
Signature Algorithm: sha256WithRSAEncryption
75:b3:be:26:91:1e:09:53:c0:2c:de:ed:73:3b:b0:de:42:fe:
04:cf:40:69:a8:58:68:fc:1a:f5:cc:c8:4f:05:fd:fa:bb:14:
a5:61:0a:f8:24:d7:3b:32:b0:4d:d4:b2:0c:3f:f9:99:25:77:
93:b2:8b:ad:46:c0:7b:5b:06:40:75:83:e3:7a:3c:7c:67:87:
07:70:d6:e6:d7:43:05:5e:fd:4f:c1:70:df:c3:15:3a:da:42:
3b:1c:35:b9:18:1c:3b:43:f8:16:9b:a7:8e:22:d7:4f:a2:42:
34:cc:1d:aa:bd:15:7f:bd:8f:b3:9e:38:53:8f:71:99:b2:e6:
6d:b9:ad:30:e7:03:75:27:4e:52:48:b6:f0:ea:86:1e:8b:fb:
4d:90:9f:20:c7:1b:37:8f:29:a4:0e:9f:36:82:47:0f:6a:49:
f5:7a:35:2e:cb:3f:46:4d:14:c9:5e:cf:95:82:c1:71:c3:c2:
d3:5c:38:12:97:75:ee:87:64:c3:61:9e:71:d3:cc:89:d7:d9:
2f:82:95:83:09:6a:e5:e4:58:5a:c8:ad:b1:14:53:61:8f:d7:
21:f8:8b:67:c2:2b:63:f7:99:fa:53:f7:ef:7e:fb:ee:30:ae:
87:19:80:9b:87:74:4d:0a:d8:77:f3:4e:47:81:98:d8:22:b2:
26:8e:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:05:05 2024 by rpki-client on console-fra.rpki-client.org